Renewal of SSL certificate - Challenge Invalid (timeout during connect - likely firewall problem) about autoacme

[avonwyss]

Can you access http://remote.waterheadacademy.co.uk/.well-known/acme-challenge/YYrgraTd4dLkPGpq11Mrnzq3T9bpWshGsXHfwBoPPIs from outside of your network (e.g. over mobile network)? This should give a 404 error since the challenge file has been deleted; if you get a timeout you need to find and fix the timeout so that the challenge file can be checked by the LE servers (Maybe port 80 has been blocked? Is the DNS entry on public DNS servers for remote.waterheadacademy.co.uk resolving to the correct IP address?).

[jmcd23]

Hi avonwyss, thanks for coming back to me.

Yes, I do get the 404 which is expected as the challenge file has been deleted. I can also confirm it does get created into the directory then is removed suggesting that the AutoACME tool is working. I took a quick copy of one of the challenge files and copied it back to check if I can access that directory over http from outside the network. which i can which suggests that DNS is also correct.

I also created a dummy test file into the location and it displays as expected.
Some examples...

http://remote.waterheadacademy.co.uk/.Well-known/acme-challenge/I23FmdgNfbBsdg0OMeq_EIJ4UOIwKinhLVzeIlwAGnI
http://remote.waterheadacademy.co.uk/.Well-known/acme-challenge/test12345678

There have been no changes to the web server, the firewalls or the ISP (as far as I know) so little stumped.

Anything else to check?

Thanks

[avonwyss]

Well I can't access these URLs, so it does not surprise me that LE cannot access it either?

Here's what my DNS resolves to:

nslookup remote.waterheadacademy.co.uk

Non-authoritative answer:
Name:    remote.waterheadacademy.co.uk
Address:  88.98.180.178

And Qualys SSL Labs also cannot connect to your server.
https://www.ssllabs.com/ssltest/analyze.html?d=remote.waterheadacademy.co.uk&hideResults=on&latest

[jmcd23]

Thanks avonwyss, this is interesting, especially the Qualys discovery.

Google DNS does resolve to the same IP and the content displays ok for me.

So as a test I connected to a VPN and seems I can only access the server from UK sources.

Thank you very much!

[avonwyss]

You're welcome - I'll close this issue since there is nothing wrong with AutoACME.